CVE-2018-25031-SG

This repository does not have a README...

cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of-concept exploit for CVE-2026-1668. It is intended purely for educational purposes only. Please do not attempt to exploit systems that you do not own or do not have explicit permission to exploit. This proof-of-concept was developed...

CVE-2023-36144

CVE-2023-36144 PoC of CVE-2023-36144 - Intelbras Switch SG 2404 MR L2+ firmware 1.00.54 Download the backup file unauthenticated Steps to Reproduce: 1. Go to the following link http://127.0.0.1/cgi-bin/exportCfgwithpasswd replace 127.0.0.1 with the device IP 2. It will auto download the backup...

PT-2026-122008

In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br multicast sg del exclude ports removes automatically added STAR EXCL port groups by calling br multicast del pg. For S,G entries, that deletion calls back into br multicast s...

CVE-2026-98524

In the Linux kernel, the following vulnerability has been resolved: rds: ib: Clear the sg list when mapping an MR fails rdsibmapfrmr stores the caller's scatterlist in the MR before DMA mapping and registration can fail. On failure, rdsrdmamap unpins the pages and frees the scatterlist, but...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed a use-after-free issue. It seems that we forgot to set ttm-sg to NULL. This caused a panic. 1235.844104 General protection fault, likely for a non-canonical address 0x6b6b6b6b6b6b7b4b: 0000 1 SMP DEBUGPAGEALLOC...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Set the correct AMDGPU sg segment limitation. The driver needs to set the correct maxsegmentsize; otherwise, debugdmamapsg will complain about the over-mapping of the AMDGPU sg length as follows: WARNING: CPU: 6 PID:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dmaunmapsg nents The dmaunmapsg functions should be called with the same nents as the dmamapsg, not with the value returned by the map function...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fixed NULL pointer dereference in hnsrocemapmrsg ibmapmrsg allows ULPs to specify NULL as the sgoffset argument. The driver must verify whether it is a NULL pointer before dereferencing it...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 start != 0, the current code creates a chain link to the content type right after the wrap link: This would create a chain where the wrap lin...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data Buffer crash In newer versions of the SBC specs, we have a NDOB bit that indicates there is no data buffer being written to. If this bit is set via commands such as “sgwritesame --ndob”, we wil...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: A bug caused by NULL pointer dereferencing in brcmidmacsglistrw has been fixed. This patch addresses a bug where a NULL pointer dereferencing occurs when a high value of sdsgentryalign is used e.g., 512, and many...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nvmet-tcp: bounds checks were added in nvmettcpbuildpduiovec. The nvmettcpbuildpduiovec function could exceed cmd-req.sg when the PDU length or offset exceeded sgcnt, and then use bogus values of sg-length/offset. This led to...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smcibissgneedsync BUG: kernel NULL pointer dereference, address: 00000000000002ec PGD 0 P4D 0 Oops: Oops: 0000 1 SMP PTI CPU: 28 UID: 0 PID: 343 Comm: kworker/28:1 Kdump: loaded Tainte...

Intelbras Switch Config Leak (CVE-2023-36144)

Exploits CVE-2023-36144 in Intelbras SG 2404 MR: unauthenticated GET to /cgi-bin/exportCfgwithpasswd downloads full device backup with credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Intelbras Switch config export leak CVE-2023-36144.""" from kittysploit import from...

PT-2026-98616

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunvdc driver where map table entries are permanently leaked when a descriptor send fails. The send request function maps request pages into the LDC channel map...

CVE-2026-95697

MISP contains an authorization flaw in the Organisation model's captureOrg method . When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. An authenticated user with at leas...

PT-2026-97025

Name of the Vulnerable Software and Affected Versions GPAC version 2d7da22e 26.08-DEV Description A NULL pointer dereference occurs in the gf sg vrml field clone function when cloning a PROTO default SFImage field with a NULL source pointer. A remote attacker can cause an application crash and...

CVE-2026-95697: Missing Authorization

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

PT-2026-96768

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...